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DETAILED ACTION 



Double Patenting 



Claims 1, 5, 7, 8, 11, 15, 18, 19 are rejected under 35 U.S.C. 101 as claiming the same 
invention as that of claims 32, 33, 36, 37 of prior U.S. Patent No. 10/383419. This is a 
double patenting rejection. 



1 . This action is responding to application papers filed on 12-26-2006. 

2, Claims 1-20 are pending. Claims 1, 2, 3, 10, 11, 12, 13, 15 have amended. 
Claims 16 - 20 are new. Claims 1, 11, 15, 16, 17, 18 are independent. 



Response to Remarks 



3. The following is in response to. applicant's remarks date 12-26-2007. 



3.1 Applicant argues that the referenced prior art does not disclose, "... double 
patenting issue ... " ' 

The double patenting application is application number 10/383419. The double 
patenting rejection has not been overcome and remains. 



3.2 Applicant argues that the referenced prior art does not disclose, "... user profiles 

• * 

are credential containers or directories of user names, passwords, or other 
authentication information ..." (see Remarks Page 11) 
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The Schaeck prior art discloses the usage of a user profile, which is a user 
account. In addition, Schaeck discloses the usage of user names and passwords as 
authentication credentials, (see Schaeck paragraph [0059], lines 16-24: password, 
authentication information utilized for access to application (i.e. services)) 

3.3 Applicant argues that the referenced prior art does not disclose, displaying the 
view to an administrator (see Remarl<s Page 11) 

The Schaeck prior art discloses the view of the list of applications being viewable 
by an administrator, (see Schaeck paragraph [0043], lines 5-7; paragraph [0068], lines 
4-8: view list of multiple or plurality of accessible services or applications; paragraph 
[0045], lines 7-12: role of administrator, view of application (i.e. services))) 

3.4 Applicant argues that the referenced prior art does not disclose, "... tlie views of 
the applicant are not limited to Internet-based resources in this way (see Remarks 
Page 11) 

The term "Internet" is not mentioned in the claimed invention. There are no 
restrictions based on the usage of the Internet. There is no restriction based on using 
the Internet and other communications network. 

ft 

3.5 Applicant argues that the referenced prior art does not disclose, "... totality of 
applications ... ". (see Remarks Pages 12, 13, 14) 
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The term " totality" is not mentioned in the specification or the original claims. This 

* 

is new matter and will not be addressed. The specification mentions a plurality or 
multiple applications accessible by user. 

3.6 Applicant argues that the referenced prior art does not disclose, "... injecting 
authentication ... (see Remarks Page 15) 

The Schaeck prior art discloses the capability to inject previously stored 
authentication credentials into a current authentication procedure, (see Schaeck 
paragraph [0059], lines 16-24: password, authentication information injected (i.e. 
presented)) 

3.7 Applicant argues that the referenced prior art does not disclose, "... creation of a 
user account . . . (see Remarl<s Page 15) 

A user profile is a user account. A user account is information such as a 
password and username, which enable a user to access a computer system. 
The Schaeck prior art discloses a user profile (i.e. user account) 

3.8 The examiner has considered the applicant's remarks concerning the method and 
apparatus for automatic user authentication and capability to identify and display a view 

of the plurality of applications accessible by a user based on the user's role. 

* 

Applicant's arguments have thus been fully analyzed and considered but they are not 
persuasive. 
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After an additional analysis of the applicant's invention, remarks, and a search of 
the available prior art, it was determined that the current set of prior art consisting of 
Schaeck (20030163513) and Delany (20020138763) discloses the applicant's invention 
including disclosures in Remarks dated December 26, 2006. 

Claim Rejections - 35 USC § 102 

A, The following is a quotation of 35 U.S.C. 102(e) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(e) the invention was described in (1) an application for patent, publislied under section 122(b), by 
another filed in the United States before the invention by the applicant for patent or (2) a patent 
granted on an application for patent by another filed in the United States before the invention by the 
applicant for patent, except that an international application filed under the treaty defined in section 
351(a) shall have the effects for purposes of this subsection of an application filed in the United States 
only if the international application designated the United States and was published under Article 21(2) 
of such treaty in the English language. 

5. Claims 1, 3, 6, 11, 13, 15, 16, 17 are rejected under 35 U.S.C. 102(e) as being 
anticipated by Schaeck et al. (US Patent No. 20030163513). 

Regarding Claims 1, 11, 15, Schaeck discloses a method, apparatus for providing a 
system administrator with a view of a totality of application accessible bv a user 
comprising: 

a) identifying a totality of applications (see Schaeck paragraph [0037], lines 1-5: 
service equivalent to application; paragraph [0066], lines 5-10: aggregation of 
services or applications) accessible by a user by examining authentication 
credential container of the user; (see Schaeck paragraph [0066], lines 1 -5, 
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paragraph [0081], lines 1-11: examine user authentication credentials; paragraph 
[0022], lines 1 -3: profile or credentials container) and 

b) generating a view of the totality of applications accessible by the user, (see 
Schaeck paragraph [0043], lines 5-7; paragraph [0068], lines 4-8: view list of 
multiple or plurality of accessible services or applications; paragraph [0044], lines 
1 -4: user actions, accessible by the user) 

c) a view of displaver to displav the view of the totallv of applications accessible bv 
the user to the administrator , (see Schaeck paragraph [0043], lines 5-7; 
paragraph [0068], lines 4-8: view list of multiple or plurality of accessible services 
or applications; paragraph [0045], lines 7-12: role of administrator, view of 
application (i.e. services)) 

* * 

Regarding Claims 3, 13, Schaeck discloses the method, apparatus of claims 1,11 
further comprising providing an interface to assist in removing access to an application 
frorh the totality of the applications by utilizing the view of the totality of the applications 
accessible by the user, (see Schaeck paragraph [0043], lines 5-7; paragraph [0068], 
lines 4-8: view list of multiple or plurality of accessible sen/ices or applications; 
paragraph [0043], lines 9-15: delete or remove access to a service or application) 

Regarding Claim 6, Schaeck discloses the method of claim 3 wherein the removing is 
performed automatically, (see Schaeck paragraph [0044], lines 1-10: data-oriented or 
presentation interface, data-oriented interface designates an automatic interface 
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between client and server; paragraph [0043], lines 9-15: delete or remove access to a 
service or application) 

Regarding Claim 16, Schaeck discloses a method for providing a system administrator 
with a list of a totality of applications accessible by a user, comprising: 

a) identifying the totality of applications accessible by the user by examining an 
authentication credential container of the user; (see Schaeck paragraph [0043], 
lines 5-7; paragraph [0068], lines 4-8: view list of multiple or plurality of 
accessible services or applications; paragraph [0045], lines 7-12: role of 
administrator, view of application (i.e. services)); (There is no disclosure in the 
specification or the original claims to display a totality of applications accessible. 
This is new matter and will not be addressed) 

b) generating a list of the totality of applications accessible by the user; (see 
Schaeck paragraph [0043], lines 5-7; paragraph [0068], lines 4-8: view list of 
multiple or plurality of accessible services or applications; paragraph [0045], lines 
7-12: role of administrator, view of application (i.e. services)); (There is no 
disclosure in the specification or the original claims to display a totality of ' 
applications accessible. This is new matter and will not be addressed) and 

c) displaying the list to the administrator (see Schaeck paragraph [0043], lines 5-7; 
paragraph [0068], lines 4-8: view list of multiple or plurality of accessible services 
or applications; paragraph [0045], lines 7-12: role of administrator, view of 
application (i.e. services)) 
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Pages 



Regarding Claim 17, Schaeck discloses a method for providing a system administrator 
with a list of a totality of applications accessible by a user together with any user names 
and passwords used in connection with those applications, comprising: 

a) identifying the totality of applications accessible by the user and any user names 
and passwords used in connection with the totality of applications by examining 
an authentication credential container of the user; (see Schaeck paragraph 
[0043], lines 5-7; paragraph [0068], lines 4-8: view list of multiple or plurality of 
accessible services or applications; paragraph [0045], lines 7-12: role of 
administrator, view of application (i.e. services)); (There is no disclosure in the 
specification or the original claims to display a totality of applications accessible. 
This is new matter and will not be addressed) 

b) generating a list of the totality of applications accessible by the user together with 
any user names and passwords used in connection with the totality of 
applications; (see Schaeck paragraph [0043], lines 5-7; paragraph [0068], lines 
4-8: view list of multiple or plurality of accessible services or applications; 
paragraph [0045], lines 7-12: role of administrator, view of application (i.e. 
services)); (There is no disclosure in the specification or the original claims to 
display a totality of applications accessible. This is new matter and will not be 
addressed) and 

c) displaying the list to the administrator, (see Schaeck paragraph [0043], lines 5-7; 
paragraph [0068], lines 4-8: view list of multiple or plurality of accessible services 



Application/Control Number: 1 0/61 7,607 Page 9 

Art Unit: 2136 

or applications; paragraph [0045], lines 7-12: role of administrator, view of 
application (i.e. services)) 

Claim Rejections • 35 USC § 103 

6. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

7. Claims 2, 4, 5, 7 - 10, 12, 14, 18 - 20 are rejected under 35 U.S.C. 103(a) as 
being unpatentable over Schaeck in view of Delany et al. (US Patent No. 
20020138763). 

Regarding Claims 2, 12, Schaeck discloses the method, apparatus of claims 1,11 
wherein the view of the totalitv of the applications, (see Schaeck paragraph [0068], 
lines 4-8: aggregated view of services or applications based on user role view; 
paragraph [0043], lines 5-7: multiple services or applications) Schaeck does not 
specifically disclose a consolidated directory of the plurality of the applications. 
However, Delany discloses wherein a consolidated directory of the plurality of the 
applications, (see Delany paragraph [0113], lines 13-18, paragraph [0129], lines 16-20: 
LDAP, consolidated user based directory information) 
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It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck as taught by Delany to enable a consolidated directory of the plurality of the 
applications. One of ordinary skill in the art would have been motivated to employ the 
teachings of Delany in order to, within a consolidated view or a single source, enable 
the addition and removal of directory entry attributes for an existing group, (see Delany 
paragraph [0014], lines 4-7: "... Over time, an administrator may discover that using a 
dynamic membership rule is a mistal<e for this group because the number of members 
is growing too fast. ... * paragraph [0014], lines 1 0-14: "... since the group has already 
been created and used, prior systems do not allow for the modification of the group by 
removing the attribute for storing a dynamic membership rule. ...") 

Regarding Claims 4, 14, Schaeck discloses the method, apparatus of claims 1,11 
further comprising: 

Schaeck discloses wherein the user utilizing the generated view, (see Schaeck 
paragraph [0043], lines 5-7; paragraph [0068], lines 4-8: view list of multiple or 
plurality of accessible services or applications), and injecting authentication 
information of the user account into the authentication credential container of the 

« 

user (see Schaeck paragraph [0052], lines 11-15: script program utilizing in the 
processing of authentication information, authentication information placed or 
"injected" within authentication process via script technology) Schaeck does not 
specifically disclose creating a user account for a new application to be accessible 
by the user. 
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However, Delany discloses: 

a) creating a user account for a new application to be accessible by the user; (see 
Delany paragraph [0108], lines 1-8; paragraph [0109], lines 12-16: create user 
accounting information) and 

b) authentication information of the user account into the authentication credential 
container of the user, (see Delany paragraph [0108], lines 1-8; paragraph [0109], 
lines 12-16: create user accounting information) 

It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck as taught by Delany such that the authentication credential container is 

9 

Stored at a server One of ordinary skill in the art would have been motivated to 
employ the teachings of Delany in order to, within a single source or consolidate 
view, enable the addition and removal of user accounting and authentication 
attributes for an existing group using a server or a centralized source, (see Delany 
paragraph [0014], lines 4-7; paragraph [0014], lines 10-14) 

Regarding Claim 5, Schaeck discloses the method of claim 4 wherein the 
authentication credential container and a server, (see Schaeck paragraph [0066], lines 
1-5, paragraph [0081], lines 1-11: examine user authentication credentials; paragraph 
[0051], lines 1-6; paragraph [0075], lines 1-4: authentication server system; paragraph 
[0022], lines 1-3: profile or credentials container) Schaeck does not specifically disclose 
wherein the authentication credential container stored at a server. However, Delany 
discloses wherein authentication credential container is stored at a server (see Delany 
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paragraph [0128], lines 1-3; paragraph [0129], lines 1-4: database manager, profile or 
authentication information under control of directory server and database server) 
It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck as taught by Delany such that the authentication credential container is stored 
at a server. One of ordinary skill in the art would have been motivated to employ the 
teachings of Delany in order to enable, within a single source or a consolidate view from 
a server, centralized access to user accounting and authentication attributes for an 
existing group, (see Delany paragraph [0014], lines 4-7; paragraph [0014], lines 10-14) 

Regarding Claim 7, Schaeck discloses the method of claim 4 wherein processing user 
account information is performed automatically, (see Schaeck paragraph [0044], lines 
1-10: data-oriented or presentation interface, data-oriented interface designates an 
automatic interface) Schaeck does not specifically disclose the creation of a user 
account. However, Delany discloses wherein creating the user account, (see Delany 
paragraph [0108], lines 1-8; paragraph [0109], lines 12-16: create user accounting 
information) 

It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck as taught by Delany to create the user account. One of ordinary skill in the art 
would have been motivated to employ the teachings of Delany in order to enable the 
utilization of multiple methods, such as a manual or an automatic method, for the 
update of user attributes, (see Delany paragraph [0014], lines 4-7; paragraph [0014], 
lines 10-14) 
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Regarding Claim 8, Schaeck discloses the method of claim 4 wherein processing the 
user account information is performed manually by an administrator, (see Schaeck 
paragraph [0044], lines 1-10: data-oriented or presentation interface, presentation 
interface designates a manual interactive interface) Schaeck does not specifically 
disclose the creation of a user account. However, Delany discloses wherein creating 
the user account, (see Delany paragraph [0108], lines 1-8; paragraph [0109], lines 12- 
16: create user accounting information) 

It would have been obvious'to one of ordinary skill in the art to have modified 
Schaeck as taught by Delany to creating the user account. One of ordinary skill in the 
art would have been motivated to employ the teachings of Delany in order to enable the 
utilization of multiple methods, such as a manual or an automatic method, for the 
update of user attributes, (see Delany paragraph [0014], lines 4-7; paragraph [0014], 
lines 10-14) 

Regarding Claim 9, Schaeck discloses the method of claim 4 wherein the 
authentication information is injected into a hardware device of the user, (see Schaeck . 
paragraph [0052], lines 11-15: script program utilizing in the processing of 
authentication information, authentication information placed or "injected" within 
authentication process via script technology) Schaeck does not specifically disclose 
creating a user account for a new application to be accessible by the user. However, 
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Delany discloses wherein creating a user account, (see Delany paragraph [0108], lines 

* 

1-8; paragraph [0109], lines 12-16: create user accounting information) 

ft 

It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck as taught by Delany to creating a user account. One of ordinary skill in the art 
would have been motivated to employ the teachings of Delany in order to enable the 
utilization of multiple methods, such as an automatic or script technology method for the 
update of user attributes, (see Delany paragraph [0014], lines 4-7; paragraph [0014], 
lines 10-14) 

Regarding Claim 10, Schaeck discloses the method of claim 1 further comprising user 
directories for each application of the plurality of the applications accessiblaby the user, 
(see Schaeck paragraph [0043], lines 5-7; paragraph [0068], lines 4-8: view list of 
multiple or plurality of accessible services or applications) Schaeck does not 
specifically disclose removing individual directories for each application. However, 
Delany disclose wherein removing individual user directories for each application, (see 
Delany paragraph [0108], lines 1-8; paragraph [0109], lines 12-16: delete or remove 
user accounting information or user directories) 

It would have.been obvious to one of ordinary skill in the art to have modified 
Schaeck as taught by Delany to enable removing individual user directories for each 
application. One of ordinary skill in the art would have been motivated to employ the 
teachings of Delany in order to enable, within a single source or consolidate view, 
enable the addition and removal of user accounting and authentication attributes for an 
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existing group using a centralized source, (see Delany paragraph [0014], lines 4-7; 
paragraph [0014], lines 10-14) 

Regarding Claim 18, Schaeck discloses a method for providing a system administrator 
with a consolidated directory of a totality of applications accessible by a user, the 
method comprising: 

a) identifying the totality of applications accessible by the user by examining 
authentication credential container of the user; (see Schaeck paragraph [0043], 
lines 5-7; paragraph [0068], lines 4-8: view list of multiple or plurality of 
accessible services or applications; paragraph [0045], lines 7-12: role of 
administrator, view of application (i.e. services)); (There is no disclosure in the 
specification or the original claims to display a totality of applications accessible. 
This is new matter and will not be addressed) 

b) generating a directory of the totality of applications accessible by the user; (see 
Schaeck paragraph [0043], lines 5-7; paragraph [0068], lines 4-8: view list of 
multiple or plurality of accessible services or applications; paragraph [0045], lines 
7-12: role of administrator, view of application (i.e. services)); (There is no 
disclosure in the specification or the original claims to display a totality of 
applications accessible. This is new matter and will not be addressed) and 

c) displaying the directory to the administrator; ((see Schaeck paragraph [0043], 
lines 5-7; paragraph [0068], lines 4-8: view list of multiple or plurality of 
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accessible services or applications; paragraph [0045], lines 7-12: role of 
administrator, view of application (i.e. services))) 
the directory comprising: 

d) a name of the user; (see Schaeck paragraph [0059], lines 16-24: userid (i.e. 
other credentials), password) 

e) a list of keys employed by the user also detailing the type and serial number of 
each key; (There is no disclosure in the specification or the original claims that 
keys are stored in the directory. This is new matter and will not be addressed.) 

h) a list of all certificate enabled applications accessible by the user also specifying 
a user name of the user and a last login attempt of the user; (There is no 
disclosure in the specification or the original claims that a last login attempt is 
stored or processed, and to display a list of all certificate enabled applications. 
This is new matter and will not be addressed) 

j) a list of all enterprise applications accessible by the user also specifying a user 
name of the user and a last login attempt of the user; (There is no disclosure in 
the specification or the original claims that a last login attempt is stored or 
processed. This is new matter and will not be addressed) and 

k) a list of all personal application accessible by the user also specifying a number 
of accounts connected to each personal application; (There is no disclosure in 
the specification or the original claims to display a list of the number of accounts 
connected to each personal application. This is new matter and will not be 
addressed) 
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However, Delany discloses: 

f) a profile of the user detailing a role of the user, a name of the user, an email 
address of the user, a department of the user, an employee ID of the user, and 
any additional attributes of the user that have been specified; (see Schaeck 
paragraph [0108], lines 1-8; paragraph [0109], lines 12-16: process user profile 
information, account, role of user, administrator) 

g) a means of updating and resetting the profile; (see Delany paragraph [0108], 

« 

lines 1-8; paragraph [0109], lines 12-16: update profile information) 
i) a means of deleting the user name of the user; (see Delany paragraph [0108], 
lines 1-8; paragraph [0109], lines 12-16: remove user profile (i.e. account) 
information) 

It would have been obvious to one of ordinary skill in the art to have modified 
Schaeck as taught by Delany to enable the processing of user profile (i.e. user 
account) information. One of ordinary skill in the art would have been motivated to 
employ the teachings of Delany in order to enable, within a single source or 
consolidate view, enable the addition and removal of user accounting and 
authentication attributes for an existing group using a centralized source, (see 
Delany paragraph [0014], lines 4-7; paragraph [0014], lines 10-14) 

Regarding Claim 19, Schaeck discloses the consolidated directory of claim 18, further 
comprising: a specification of a password for each certificate enabled application, each 
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enterprise application, and each personal application, (see Schaeck paragraph [0059], 
lines 16-24: password required for access to applications) 

Regarding Claim 20, Schaeck discloses the consolidated directory of claim 1 8, further 
comprising: 

a) means for a system administrator to add one or more applications to the lists of 
the certificate enabled applications, the enterprise applications, or the personal 
applications of the user; (see Schaeck paragraph [0043], lines 13-15: add or 
update application list) and 

b) means for a system administrator to delete one or more applications from the 
lists of the certificate enabled applications, the enterprise applications, or the 
personal applications, (see Schaeck paragraph [0043], lines 13-15: delete 
accounts) 

Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Carlton V. Johnson whose telephone number is 571- 
270-1032. The examiner can normally be reached on Monday thru Friday , 8:00 - 
5:00PM EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Nasser Moazzami can be reached on 571-272-4195. The fax phone 
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number for the organization where this application or proceeding is assigned is 571- 
273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status Infomiation for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 

« 

Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to. the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




Carlton V. Johnson 

Examiner 
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